最新的Fortinet Network Security Expert 5 Written Exam (500) - NSE5免費考試真題

A. FortiManager does not import duplicate objects for entries already in the ADOM configuration database.

B. FortiManager creates the duplicate objects in the ADOM configuration database.

C. These duplicate objects exist on the same FortiGate device.

D. FortiManager is attempting to install these duplicate objects to the managed FortiGate device.

A. Non-management VDOMs can not reference physical interfaces.

B. The dmz interface is referenced in the configuration of another VDOM.

C. The dmz interface is in PPPoE or DHCP mode.

D. The administrator does not have the proper permissions to reassign the dmz interface.

E. Reassigning an interface to a different VDOM can only be done through the CLI.

A. Any other matched DLP rules will be ignored with the exception of Archiving.

B. The traffic matching the DLP rule will bypass antivirus scanning.

C. Future files whose characteristics match this file will bypass DLP scanning.

D. The client IP address will be added to a white list.

A. Use two or more route-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.

B. Dynamic routing protocols cannot be used over IPSec VPN tunnels.

C. Use two or more policy-based IPSec VPN tunnels and enable OSPF on the IPSec virtual interfaces.

D. Use route-based VPNs on the central office FortiGate unit to advertise routes with a dynamic routing protocol and use a policy-based VPN on the remote office with two or more static default routes.

A. The FortiGate unit will create a session entry in the session table when the traffic is being routed by the blackhole route.

B. As long as port1 is up, all the traffic to 172.20.1.0/24 will be routed by the static route number 1. If the interface port1 is down, the traffic will be routed using the blackhole route.

C. The FortiGate unit will NOT create a session entry in the session table when the traffic is being routed by the blackhole route.

D. All traffic to 172.20.1.0/24 will always be dropped by the FortiGate unit.

E. Traffic to 172.20.1.0/24 will be shared through both routes.

A. Enable a set of unique UTM profiles under "Edit User Group".

B. The administrator must enable the UTM profiles in an identity-based policy applicable to the user group.

C. When defining the UTM objects, the administrator must list the user groups which will use the UTM object.

D. The administrator must apply the UTM features directly to a user object.

A. Bob will use his public key to encrypt the file and Alice will use Bob's private key to decrypt the file.

B. Bob will use Alice's public key to encrypt the file and Alice will use Bob's public key to decrypt the file.

C. Bob will use his public key to encrypt the file and Alice will use her private key to decrypt the file.

D. Bob will use Alice's public key to encrypt the file and Alice will use her private key to decrypt the file.

E. Bob will use his private key to encrypt the file and Alice will use her private key to decrypt the file.

A. Virtual Domains

B. Administrative Domains

C. Centralized Management

D. Cloud-based Management

A. None of the above.

B. When the system has reached its capacity for log messages, the FortiGate unit will stop logging to memory.

C. When the system has reached its capacity for log messages, the FortiGate unit overwrites the oldest messages.

D. If the FortiGate unit is reset or loses power, log entries captured to memory will be lost.

A. Only administrative users with a super_admin profile will be able to enter all VDOMs to make configuration changes.

B. VDOMs divide a single FortiGate unit into two or more virtual units that function as multiple, independent units.

C. A management VDOM handles SNMP, logging, alert email, and FDN-based updates.

D. VDOMs share firmware versions, as well as antivirus and IPS databases.

E. A backup management VDOM will synchronize the configuration from an active management VDOM.

A. The FortiGate unit is being treated as a syslog device and is only permitted to send log data.

B. The FortiGate unit is considered an unregistered device.

C. The FortiGate unit has insufficient privileges. The administrator should edit the device entry in the FortiAnalyzer and modify the privileges.

D. The FortiGate unit has been blocked from sending archive data to the FortiAnalyzer device by the administrator.

A. A look-up is always done each time a packet arrives, from either the server or the client side.

B. A look-up is done when the first packet coming from the client (SYN) arrives, and a second is performed when the first packet coming from the server (SYNC/ACK) arrives.

C. A look-up is done only during the TCP 3-way handshake (SYNC, SYNC/ACK, ACK).

D. A look-up is done only when the first packet coming from the client (SYN) arrives.

A. Block

B. None

C. Quarantine Interface

D. Ban

E. Ban Sender

F. Quarantine IP Address

G. Archive

A. OSPF Hello packets are not sent on point-to-point networks.

B. OSPF Hello packets will be sent on all interfaces configured with an address matching the 10.0.1.0/24 and 172.16.0.0/12 networks.

C. OSPF Hello packets will only be sent on interfaces configured with the IP addresses
172.16.1.1 and 172.16.1.2.

D. OSPF Hello packets will be sent on all interfaces of the FortiGate device.

A. Integrity of the backup file is protected since it cannot be easily modified when encrypted.

B. A copy of the encrypted backup file is automatically pushed to the FortiGuard Distribution Service (FDS) for disaster recovery purposes. If the backup file becomes corrupt it can be retrieved through FDS.

C. Fortinet Technical Support can recover forgotten passwords with a backdoor passphrase.

D. Protects details of the device's configuration settings from being discovered while the backup file is in transit. For example, transferred to a data centers for system recovery.

E. Prevents the backup file from becoming corrupted.